CVE-2004-2436

Description

Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.

Affected products

• Broadcom / common_services1.0 – 1.0
• Broadcom / common_services1.1 – 1.1
• Broadcom / common_services2.0 – 2.0
• Broadcom / common_services2.1 – 2.1
• Broadcom / common_services2.2 – 2.2
• Broadcom / common_services3.0 – 3.0
• Broadcom / unicenter_network_and_systems_management3.0 – 3.0
• Broadcom / unicenter_serviceplus_service_desk6.0 – 6.0

References

• MISChttp://osvdb.org/displayvuln.php?osvdb_id=10408
• VENDOR_ADVISORYhttp://secunia.com/advisories/12639/
• MISChttp://securitytracker.com/id?1011468
• MISChttp://www.securityfocus.com/bid/11277
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/17562